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ffiEE 1394 Link Layer Chip with "5C" Authentication and Key Exchange Accelerator 



BACKGROUND OF THE INVENTION 

1. Field of the Invention 

This invention relates to the field of communications, and in particular to secure 
communications via an IEEE 1394 (firewire) interface. 

2. Description of Related Art 

Secure communications between and among devices is becoming increasingly important 
for the protection of copyright material and other communiques. An organization known as the 
Digital Transmission Licensing Authority (DTLA) has created the Digital Transmission Content 
Protection Specification, commonly known as the "5C" specification. The 5C specification defines 
a cryptographic system comprising a number of cryptographic components, including methods for 
enciphering and deciphering content material, and methods for determining secure cryptographic 
keys for use in this enciphering and deciphering of the content material. 

A commonly used protocol for the transmission of audio/visual material among 
audio/visual applications is the IEEE 1394 protocol and interface. Special purpose controllers 
have been developed to support the transfer of enciphered material between an application 
program and the IEEE 1394 bus interface, including the enciphering and deciphering of the 
content material being transferred in accordance with the 5C specification, based on cryptographic 
keys that are provided by the application program. As is known in the art, given a sufiBciently 
robust key, the enciphering and deciphering of information can provide a high level of security, 
and can be effected with relatively little overhead, being based primarily on a "shift and add" or 
similar operation. The complexity required to generate the keys that are used to perform the 
enciphering and deciphering, on the other hand, is substantial. To minimize the potential damage 
caused by a breach of security of keys, the 5C specification caUs for the generation of unique keys 
by the devices involved in the transfer of the information. A discovery of the keys that are used by 
one pair of devices provides no information concerning the keys used by another pair of devices. 
When a communication of protected information is required, the devices generate a unique set of 
keys for ciphering and deciphering the information. The generation of unique keys for each 
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session of information transfer is effected via a "key exchange", which is an exchange of 
parameters that are used to generate keys within each device. 

In the 5C specification, an elliptic curve Diflfie-Helhnan key exchange, and an eUiptic curve 
Digital Signature algorithm is specified for M authentication. The elliptic curve computations are 
5 known m the art, and are mathematically complex. For sufficient security, the computations use 
relatively large numbers, in the order of 160 or more bits. The 5C specification requires that these 
operations be completed in a limited amount of time, for operation eflfectiveness, as well as 
security reasons. Because of the mathematical complexity and required efficiency, a conventional 
implementation of these tasks includes a software program that is executed on a high-performance 

1 0 microprocessor. For example, on a home computer system with an EEEE 1 3 94 interface, the 
application program that is used to transfer the information to other devices contains the sub- 
programs that compute or verify digital signatures, and, if the signatures are verified, effect a key 
exchange. These sub-programs are typically run on a Pentium® or similar high performance 
processor, via, for example, a "C" program that includes complex operations that are known to be 

15 computationally irreversible. That is, a knowledge of the output of the complex operation 

provides little or no information regarding the parameters that were used to generate the output. 
For example, in the context of the 5C specification, elliptic curve cryptography is based on a 
determination of a point on an elliptic curve based on another point on the curve. 

As the name "key exchange" implies, both the device that will be transmitting the 

20 protected information, and the device that will be receivmg the protected information must 
participate in this exchange, and therefore both devices must contain sufficient capabiUties to 
effect the above described key exchange computations. Although the execution of a key exchange 
on a home computer is feasible, the cost of a high performance microprocessor can be prohibitive 
in many applications, specifically consumer electronic equipment, such as video recorders, CD 

25 players, and the like. Additionally, each application program on a computer, and each component 
device that is expected to comply with the 5C specification, must incur the cost of developing and 
testing, or purchasing and testing, the software required to effect the digital signing and key 
exchange tasks required by the 5C specification. As an ahemative to a high-performance 
processor running a software program, a special purpose processor can be provided to facilitate 

30 the 5C authentication functions, but such a special purpose processor can be expected to require a 
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substantial modification to existing processing systems designs and architectures, and will add 
costs to each device that is expected to comply with the 5C specification. 

BRIEF SUMMARY OF THE INVENTION 
5 It is an object of this invention to facilitate the task of 5C authentication and key 

exchange. It is a further object of this invention to facilitate the task of 5C authentication and key 
exchange in an IEEE 1394 environment. It is a further object of this invention to minimize the 
burden on application programs for eflfecting authentication and key exchange. It is a further 
object of this invention to minimize the cost of implementing 5C authentication and key exchange 
10 in an IEEE 1394 environment. It is a fijrther object of this invention to provide a device that 
facilitates 5C authentication and key exchange in existing system architectures. 
% These objects and others are achieved by incorporating authentication and key exchange 

W fimctions, such as those conforming to the Digital Transmission Licensing Authority's (DTLA) 
Digital Transmission Content Protection (5C) Specification, into a link-layer access device of a 

m 

25 15 conventional processing system. Because of the suitability of IEEE 1394 for transferring 

audio/video information, these functions are preferably embodied in an IEEE 1394 compatible 
CI link-layer access device. The link-layer access device of this invention is configured to support, 
n for example, the elliptic curve muhiplication functions of a Diffie-Helhnan key exchange process, 
g as well as digital signature generation and digital signature verification. By incorporating the 
O 20 authentication and key exchange functions into a link-layer access device, the system architecture 
and devices that are commonly used in conventional processing systems can be used, thereby 
providing an incremental path toward increased protection of copyright material. In a preferred 
embodiment, the conventional link-layer controller is configured to implement the authentication 
and key exchange processes, via calls to the link-layer access device to perform the complex 
25 mathematical operations, thereby eliminating the need for each application-layer program or 
device to implement these processes. 



780100 PATENT APPLICATION 



Page 3 of 15 



1 March 2000 



# 



BRIEF DESCRIPTION OF THE DRAWINGS 
The invention is explained in further detail, and by way of example, with reference to the 
accompanying drawings wherein: 

FIG. 1 illustrates an example block diagram of a processing system in accordance with this 
5 invention, 

FIG. 2 illustrates an example block diagram of a link-layer access device that facilitates 
cryptographic authentication and key exchange functions, including key exchange functions, in 
accordance with this invention. 

Throughout the drawings, the same reference numerals indicate similar or corresponding 
1 0 features or functions. 

^ I DETAILED DESCRIPTION OF THE INVENTION 

FIG. 1 ilhxstrates an example block diagram of a processing system 100 in accordance with 
y this invention. By intent, the architecture of the processing system 100 is substantially identical to 
PI 15 that of conventional prior-art processing systems. The processing system 100 inchides an 
J application device 1 10 that communicates with another device (not shown) via a physical-layer 
CI communications path, such as an IEEE 1394 bus 150. Consistent with common hierarchical 

H ; 5 

p protocol structures, the application device 1 10 transfers information to the physical-layer 

s s : 

communications path via a link-layer access device 200 and a physical-layer access device 130. A 
CJ20 node controller 120 manages the flow of information between the application device 1 10 and the 
link-layer access device 200, and the processing of information at the link-layer access device 200. 

In accordance with this invention, the link-layer access device 200 includes an 
authentication and key exchange accelerator 250, as illustrated in FIG. 2. The authentication and 
key exchange accelerator 250 facilitates cryptographic tasks, such as key exchange, digital 
25 signing, and digital signature verification. Copending U.S. patent application, "Simple Algorithmic 
Cryptography Engine", U.S. serial number 09/466,392, filed 17 December 1999 for George 
Fleming, Farrell Ostler, and Antoine Dagher, provides a processing architecture that is particularly 
well suited for cryptographic processing, and is incorporated by reference herein. In the 
copending application, a variety of techniques are employed to minimize the complexity of the 
3 0 design and to minimize the complexity of the interconnections within the device, thereby allowing 
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the engine to be incorporated within an existing link-layer access device integrated circuit design, 
A variety of techniques are also employed to ease the task of programming the processor for 
cryptographic processes, and to optimize the efficiency of instructions that are expected to be 
required for effecting digital signing, verification, and key exchange. Because authentication and 
5 key exchange tasks are characterized by operations on wide data items, particular emphasis is 
placed on the efficient processing of multi-word operations, including the use of constants having 
the same width as an instruction word. A simplified arithmetic unit is provided that is specifically 
designed to support digital signing, verification and key exchange, with minimal overhead. 

In a preferred embodiment of this invention, the link-layer access device 200 receives 
10 commands fi-om the node controller 120 to effect the provided authentication and key exchange 
tasks. As is common in the art, the controller 120 is typically a low-cost microprocessor, such as 
an 805 1 -type controller, wkh insufficient processing power to provide the authentication and key 
J exchange tasks. By providing the authentication and key exchange accelerator 250 in the link- 
i layer access device 200, to which the node controller 120 is traditionally coupled, the 
1 15 authentication and key exchange tasks can be off-loaded from the application device 110 without 

introducing a change to the traditional processing system architecture. Preferably, the link-layer 
: access device 200 of this invention has the same pin-out of prior art link-layer access devices, so 
I that existing processing system designs can be upgraded to inchide authentication and key 
I exchange capabilities via changes to the software and^r firmware used in the node controller 120. 
'20 The resultant combination of node controller 120 and link-layer access device 200 substantially 
eliminates the need for application devices 110, and corresponding application-layer programs, to 
include the complex operations required to effect digital signing, verification, and key exchange, 
thereby minimizing the development time and cost for introducing DTLA 5C security to copy 
protected material 

25 The node controller 120 is configured to control the sequences involved in authentication 

and key exchange processes, and to provide cryptographic parameters and commands to the link- 
layer access device 200, as required, via the controller interface 220 of the link-layer access device 
200. The authentication and key exchange accelerator 250 of the link-layer access device 200 is 
configured to perform the complex mathematical operations required to produce cryptographic 

30 items to fiilfiU each command, based on the parameters provided by the controller 120 or stored 
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within the link-layer access device 200, For ease of reference, the terms cryptographic items and 
parameters are used herein to include the parameters, arguments, intermediate results, final 
results, and so on, that are communicated among and between devices for the purpose of effecting 
a task related to cryptography, such as digital signing, verification, and key exchange and 
generation. In a preferred embodiment, the link-layer access device 200 is configured to perform 
the following operations, in response to corresponding commands fi-om the node controller 120: 
Basepoint Multiply (first phase of Diflfie-Hellman key exchange) 
Point Multiply (final phase of Diffie-HeUman key exchange) 

EC-DSA Verify (verify digital signature of a message) 

EC-DSA Sign (digitally sign a message), 

where EC-DSA corresponds to the Elliptic-Curve Digital Signature Algorithm, coromon in the 
art. The basepoint multiply and point multiply operations include the aforementioned elliptic curve 
multiplication operations that provide a point on an elliptic curve based on another point on the 
curve and one or more parameters associated with the elliptic curve DiflSe-Hellman key exchange 
algorithm, common in the art. The EC-DSA verify operation verifies a source of a message fi-om 
another device, based on a key associated with the other device. The EC-DSA sign operation 
binds a cryptographic item to the message, to facilitate a subsequent verification of the source of 
the message at another device, based on a key associated with this device. 

In a DiflBe-Hellman key exchange, each device chooses a local parameter, such as a large 
random number, and computes a particular fianction with this parameter as an argument. The 
result of this fimction is communicated to the other device. Each de\dce then computes a second 
fimction with the communicated item and its local parameter as arguments. The two fimctions that 
are applied in this exchange are such that the result provided by the second fiinction in each 
device is identical, and also such that knowledge of the communicated items provides no 
assistance to a third party in determining the common result. For example, consider x and y being 
the local parameters of each device, and the result of a modular exponentiation of a commonly 
known integer g by the local parameter x, y (X = g^ mod m; Y - g^ mod m) being the 
communicated items X and Y, where m is also commonly known to each device. Each device 
computes a second modular exponentiation of the received item (Kl = Y"" mod m; K2=X^ mod 
m). Both Kl and K2 will be equal to g^mod m (Kl = (g^ mod m)"" mod m; K2 = (g'' mod m)^ 
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mod m), and, provided that x, and y are large, a knowledge of g, m, X, and Y provides little or no 
assistance in determining the value g"^ mod m. This common result of the second fiinction (g"^ 
mod m) at each device is used as the key for ciphering and deciphering messages. In an 
embodiment that satisfies the 5C specification, the functions are elliptic curve functions, rather 
5 than exponentiation fimctions, although this invention is not, per se, limited to the 5C 

specification or elliptic curve fimctions. In a preferred embodiment, the link-layer access device 
200 facilitates the authentication processes of signing and verifying, as well as key exchange, by 
providing operations that are commonly used in cryptographic applications, such as 
exponentiation or elliptic curve multiplications, and are too complex for embodiment in a low-cost 
10 microcontroller 120. The microcontroller 120 in this preferred embodiment, on the other hand, 
controls the sequence of operations, the communication of parameters with the link-layer access 
device 200, and so on, to effect the appropriate authentication and key exchange tasks, 
pi The link-layer access device 200 of this invention includes the components required to 

SI perform conventional link-layer access operations, thereby providing the aforementioned 
S5 15 authentication and key exchange operations at a minimal incremental cost compared to 

conventional processing system. The link-layer access device 200 includes an application-layer 
CI interface 210 that provides the communications interface with the application device, or devices, 
f I 1 10 of FIG. 1, and a physical-layer interface 230 that provides the communications interface with 
the physical-layer device, or devices, 130. Conventional control and status registers 260 are used 
Cl 20 to facilitate the interaction of the link-layer access device 200 with the physical and application 
layer devices via the appropriate interface 230, 210. For example, the 1394 protocol supports 
both isochronous and asynchronous communications. The isochronous, or "real-time", data must 
be placed on, and removed fi^om, the 1394 bus 150 at specific intervals, to achieve, for example 
video renderings at a specific fi-ame rate. Asynchronous communications are achieved by 
25 communicating data whenever the bus 150 is available. The transmit/receiver buffer 240, as its 
name implies, buffers the data received fi*om either domain, as required. As shown, for 
completeness, the link-layer access device 200 may include an optional cipher/decipher device 245 
that ciphers or deciphers the information being transferred through the buffer 240. The key that is 
used for this cipher/decipher operation is provided to the device 245 by the node controller 120, 
30 via the controller interface 220, afl;er the aforementioned key exchange process is completed. 



780100 PATENT APPLICATION 



Page 7 of 15 



1 March 2000 



The foregoing merely illustrates the principles of the invention. It will thus be appreciated 
that those skilled in the art will be able to devise various arrangements which, although not 
explicitly described or shown herein, embody the principles of the invention and are thus withm its 
spirit and scope. For example, the invention has been presented using the paradigm of DTLA 5C 
5 authentication and key exchange tasks in an IEEE 1394 envu^onment. Although the details of this 
invention are particularly well suited for DTLA 5C authentication and key exchange and IEEE 
1394 communications, one of ordinary skill in the art will recognize the suitability of this 
invention to other security schemes, and other communications protocols. In like manner, the 
authentication and key exchange accelerator 250 has been presented as supporting four operations 

10 that facilitate cryptographic operations, although fewer or more operations may be supported, 
depending upon the circuit area in the link-layer access device 200 that can be devoted to 
cryptographic tasks. For example, random number generation, hashing, and the like can be added 
to the link-layer access device 200, if the required circuit area for these functions is available. 
These and other system configuration and optimization features will be evident to one of ordinary 

15 skill in the art in view of this disclosure, and are included within the scope of the following claims. 
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CLAIMS 



We claim: 

L A processing system comprising: 

an application device that is configured to communicate information with a physical-layer 
5 access device via a link-layer access device, 

a node controller that is configured to control the link-layer access device, 
the link-layer access device, operably coupled to the appUcation device, the node 
controller, and the physical-layer access device, that is configured to facilitate an exchange of the 
information fi-om and to the application device with data that is communicated to and fi-om the 
1 0 physical-layer access device; 



the link-layer access device is further configured to provide, in response to one or more 
commands fi"om the node controller, one or more cryptographic items based on one or more 
parameters fi:-om the node controller 



wherein, 




2. The processing system of claim 1, wherein 



fi20 



the one or more cryptographic items include at least one of 
a digital signature, 

a verification of a digital signature, and 
a cryptographic key item. 



3. The processing system of claim 1, wherein 



25 



the one or more cryptographic items include: 
a digital signature, 

a verification of a digital signature, and 
a cryptographic key item. 
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4. The processing system of claim 1, wherein 

the link-layer access device includes a multiplication device that is configured to derive a 
second point on an elliptic curve fi-om a first point on the elliptic curve, based on the one or more 
of the parameters fi'om the node controller, 

5. The processing system of claim 1, wherein 

the node controller is configured to effect an exchange of a cryptographic key with an 
other processing system, and 

the one or more cryptographic items fi-om the link-layer access device includes the 
cryptographic key. 

6. The processing system of claim 1, wherein 

the commands fi*om the node controller include: a basepoint multiply command, a point 
multiply command, an EC-DSA verify conmiand, and an EC-DSA sign command. 
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7. A link-layer access device comprising: 

an application-layer interface device that is configured to communicate information with 
an application-layer device, 

a physical-layer interface device that is configured to communicate data with a physical- 
5 layer device, 

a buffer device, operably coupled to the application-layer interface device and the 
physical-layer interface device, that is configured to facilitate an exchange of the information of 
the application-layer device and the data of the physical-layer device, 



10 the physical-layer interface device, that is configured to facilitate control of the exchange of 
information and data, and 

an accelerator, operably coupled to a controller via the controller interface device, that is 
configured to compute one or more cryptographic items, in response to one or more 
cryptographic commands fi-om the controller, and to thereafter communicate the one or more 



E| 8. The Unk-layer access device of claim 7, wherein 

f I the accelerator includes a multiplication device that is configured to derive a second point 

^ on an elliptic curve fi-om a first point on the elliptic curve, based on one or more of parameters 

CUO provided by the controller. 

9. The link-layer access device of claim 7, wherein 

the one or more cryptographic items includes at least one of: 
a signature of a message, 
25 a verification of a digital signature, 



a controller interface device, operably coupled to the application-layer interface device and 



1 5 cryptographic items to the controller. 



a hash of one or more parameters, 
a random number, 

an exponentiation of one or more parameters, and 

an elliptic curve multiplication of one or more parameters, 



30 



the one or more parameters being provided by the controller 
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10. The link-layer access device of claim 7, wherein 

the one or more cryptographic items include: 
a signature of a message, 
a verification of a digital signature, and 
an elliptic curve multiplication of one or more parameters, 

the one or more parameters being provided by the controller. 

1 1 . The link-layer access device of claim 7, wherein 

the one or more cryptographic commands include: a basepoint multiply command, a point 
multiply command, an EC-DSA Verify command, and an EC-DSA sign command. 
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12. A method for communications comprising: 

communicating information from and to an application device to and from a physical-layer 
access device via a link-layer access device, 

controlling the link-layer access device, in dependence upon commands from a node 
controller, 

effecting an exchange of the information from and to the application device with data that 
is communicated to and from the physical-layer access device, and 

determining one or more cryptographic items via computations within the link-layer access 
device, based on one or more parameters that are provided to the link-layer access device by the 
node controller. 

13. The method of claim 12, wherein 

the one or more cryptographic items mclude at least one of 
a digital signature, 

a verification of a digital signature, and 
a cryptographic key item. 

14. The method of claim 12, wherein 

the one or more cryptographic items include: 
a digital signature, 

a verification of a digital signature, and 
a cryptographic key item. 
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15, The method of claim 12, wherein 

detennining the one or more cryptographic items includes 

deriving a second point on an elliptic curve from a first point on the elliptic curve, 
based on the one or more of the parameters from the node controller. 

15. The method of claim 12, fiirther including 

effecting an exchange of a cryptographic key with an other processing system, wherein 
the one or more cryptographic items from the link-layer access device includes the 
cryptographic key. 

16. The method of claim 12, wherein 

the commands from the node controller include: a basepoint multiply command, a point 
multiply command, an EC-DSA verify command, and an EC-DSA sign command. 
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IEEE 1394 Link Layer Chip with "5C" Authentication and Key Exchange Accelerator 

ABSTRACT OF THE DISCLOSURE 
Authentication and key exchange functions, such as those conforming to the Digital 
5 Transmission Licensing Authority's (DTLA) Digital Transmission Content Protection (5C) 
Specification, are incorporated into a link-layer access device of a conventional processing 
system. Because of the suitability of IEEE 1394 for transferring audio/video information, these 
functions are preferably embodied in an IEEE 1394 compatible link-layer access device. The link- 
layer access device of this invention is configured to support, for example, the elliptic curve 
10 multiplication fiinctions of a DiflBe-Hellman key exchange process, as well as digital signature 
generation and digital signature verification. By incorporating the authentication and key 
Q exchange functions into a link-layer access device, the system architecture and devices that are 
25 commonly used in conventional processing systems can be used, thereby providing an incremental 
^ J path tov/ard increased protection of copyright material. In a preferred embodiment, the 
m 15 conventional link-layer controller is configured to implement the authentication and key exchange 
7: processes, via calls to the link-layer access device to perform the complex mathematical 
operations, thereby eliminating the need for each application-layer program or device to 
U I implement these processes. 
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l.JNDER35aSC,ll9 



i hereby cEaim the benefit under Title 33, United Sfatcs Codc^ 3l20 nf any United States applxcatinn (s) lijitcd below and, inso^r as the subject matter of each of 
the claims of this application is iu>t disdused in Uie prior United States application in the manner provided by the firat paragraph of Tide 35 United States CodC^ 
3l 12, 1 acSau)wledge the duty to disclose material ukfomiaticn as defined in Title 37, Code of Feder^ Reguialions, si 36(a) which occuned between the filing date 
of die prior appljcation and the national or FCT intemmional filing date of Hils application: 

TOOR UNrrbD S l ATES APPUCATI0N(S) 



APPLICATION SERIAL NUMBER 


HLINGDATE 


STATUS (PATENTED, PENDING^ ABANDONED) 














I l^reby declare diat all statements made herein of my own knowledge arc true nnd that all statements made on information and belief are believed 



and ftirthcr that these statements were made wrtti the knowledge ftat wlllAil i^se statements and the like so made arc punishable by fme or imprisonment, or botii, 
under Section lOOl of Title 1 8 of the United States Code and dioc .<;iich willftii Mjus istatements may jeopardiTie the vatldity of rlic application or any patent issued 
theiEon. 

POWFJl OF ATTORNEY; As a named inventor, I hereby appoint the tbllowin^ Bttnmey(<i) end/or a^entCs) to prosecute this application and transact all business 
in the Potent and TiAdemarlc O0ice DOrmecfed therewith. {IhH name and legistsalion number) 
Algy Tamoshunas, Reg. Nfo. 27,677 
Jack £. Hakcn, Reg. No. 26^ 



SEND CORRESPONDENCE TO: 


DIRECT TELEPHONE CAl-LS Ta 


Corporate Fatent Counsel; 


KDbCftJ. Kratis, Reg. 


VJS. Philips Coiporalion; 580 White Plains Road; Tariytnwn, NV 10591 


(914)333-9634 



Dated; Z fuA f^a.rtfii| 2oo^ 


Inventoi'.s Signature: "SS^^y^^J^^ 


Full Name of 
IhveAtOf 


Last Nam* 
Fleming 


First Name 

George 


Middle Name 


Residence & 
Citizenship 


0xy Hampsbira 


Slate or I^'oieign Country United 
Kingdom 


Couflliy Of Citizenship 
U.K. 


1 Post office 1 Street Oak Cottage, Slab Lane 


CityHarapshIre 


State or Country Zip Code 
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02-riflR-2000 105 42 FROM PHILIPS SEMI CON SLS 



TO 



90015203968923 P. 04 



1 Adili«s 1 West W«llow 




U.K 


S051 


II II Romsey 






6BY 



%^ 2DOO 




FUllNameof 
Inventor 


LastNaiKtt 
Murray 


Hirst Name 

Brace 


Middle Nim^ ' ^ 


Citizenship 


Oity Hampsfaire 


SuiUs or Foreign Country United 
Kingdpin 


Countjry of CitizensMi) 


PostOfHce 
Addrefis 


Street 12 Noyce Drive 
Fair Oak 
Eastleigh 


City H^mpsbire 


Stills cr Cuuntry 


SO50 
7LT 



Dated: 


Inventor's Signsture: 


PulJ Name of 
Inventor 


LsistNsTTte 

Tolsch 


Don 


Middle Kani6 


Resi^RCC ft 
Citiz6D^ip 


Giy Albuquerque 


State or Foreign Couatry 
NM 


Country DfCiLisxmitiip 
U.5- 


PostOf^cc 
Addicss 


Street 5836 Lost Dutchman N£ 


City Albuquerque 


StateorCountiy 
U.S.A. 


Zip Code 

«7ni 



Dated: 


Inventor's Signutinc: 


FuilNamcof 
Inventor 


LastKatne 


FinftName 


ivilddie N^mc 


ResldtnoeA 
Citizenship 


City 


Slate or Foreign Country 


Country of Citizenship 


PostOffioe 
A*Ires5 


Street 


City 


Stale ur Country 


3}p Code 
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TOTfiL P. 04 



MftR-02-2000 01 = 18 P - 02 

DECLARAtIJI and POWER OF ATTORNEY^ 

Aitanry s Dodcm Na.US 0^8002 



As a bekyw named iDvenior* I hereby d«cbie thaC 
My readeiiee, p<»t ofn» 3^re$A aod ddzcmhip 

I bebeve 1 am origioaL fine aod sole Uventor (if only one rarac » ttstcsd betow) or ah origiAaL first and j«nt inventor (if phiral na imi& are E&ied below) of the 
subject mmter which Udbdincd and for wfakd^ I££E 1394 LINK LATER CHIP WITH "5C" 

AT JTHKNTi CAHON AND KEY EXCHANGE ACCELERATOR ihe gpedffcadon of which (check one) 
X is atached hereto. 

was ftled on W ApplicadOd Serial No. . and was AvmnulBd m (if appUcaWe). 

I hereby state dutt J have reviewed and littdefstafid the contents of the abovcKideiidfied iiieGifieadoiU iacUidiag Oe ctaims, 9S amended by the amendmem^s) 
rejfened to above. 

1 acknowledge Ae duty to disclose iidbrmalkia which b maRTial to tbc patef<ability of this apptictfioa in accordance with Title 37> Code of Federal RcguIaiMHi, 
?l,56(a). 

I hcn*y clsm fortagft priority benefits under Title 35, l/niled Su»& Cod*, ? 11 ^ of any focci^ appficBtion(5) fir {ntent or bvearorls cert<fi«te listed below snd 
have also idediified below any fOFBign ajiplicaion for psMni or invemar^ mtiftcate hwing a filing dale befoie that of the applicatioa oa which priority if claimed: 

PRIOR FC»BIGN AFFUCATICM^(S) 



COUNTRY 



APFUCATIDN 
NUMBER 



DATEdFFlUNC 
fl:)AY. MONTH, YEAR) 



PRIORITY CLAIMED 
UNPeR35aS.C. 119 



1 beieby dafaa dK beiwm Vflder Tide 32, Unitfxl Stales Code, >t20 of 
flicdaiiii5 0fthisappUcrtiooi«ngtdiscloKdTnilicpiOT Saw* a^ij^cadofiia the nwnnerpnpvidBd by die first 

?U2,la(towtDdgBtiie duty 10 disclose IXHIten^ 9l^l(>whichcK3ctiiTed between dieMngdiiie of 

the prior ain>acstioo find the national or FCT iotematioma fHin; dale of this AppUcadoD: 

PRK>R UNnED STATES APPUCATIOW(S) 




Ihffvbydec^th^anaaietaetnsmad^bei^aofmyownlnawlBdgeafe^ believed to be tnic; and 

fiiidw ditt ibese statemecrbE wezc made with the 

Section 1 001 oTlltle IS aT ihe VmteA States Code and that such wyifiii false statemenis ntay jeopardize die vali^&y of die application or any patent issued thcicoa. 

POWER OF ATTOIcNEYt M a named inventor, I hereby appoint die fbllowiog atUMKyCs) jvid/or B9ent(5) to prosecute this ^titiOtlOrt aiid traii«u:t an busincRS in 
die Patent and Tiadematfc Office comiccticd dierewidi. {lUl name ai^ i^si»tktn number) 
Algy TamoRhmias. Reg. No. 17,677 
Jabk E. Haken, Reg. No. 2€,9Q2 



$END CORRESPONDENCE TO: 


DIRECT TELEPHONE CALLS TO: 


Cocpoiaie Pateot Counsel; 


RobM J. Kraus, Re^ 2$,35S 


U.S. Phifips CocporaiioR: 580 White Phuns Road; Tanyfown, NY tOS91 


(914) 333^34 





Inventix-^ Signatuze: 


PuUNaiEteof 
n Inventor 


Fleming 


FirstName 
Geor]ge 


Middle Name 


ReddeAce^ 
cmzenBhip 


Oxy Hampshire 


State or Porcisn Counlzy Unftcd 

Kingdom 


Country of Citizenship 


Post Office 
Address 


Sti^et Oak Cottage^ Slab Lane 
W«stW«IIo 
1 Romsev 


atyHanqisliire 


Stale or CouiUzy 

U.K. 


Zip Code 

S051 
6BY 
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MRR-02-2000 01=19 



P. 03 



Dated: 


InvenEorls Sigpatuie: 




Last Name 

MoTFfty 


First Name 
Bruce 


Middle Name 


Residence & | 


GiyHimipsbirc 


State or FoFcieiiCDuAuy United 
Ktnedom 


Countzy of C^iztfiuiMp 

U.K. 




Post Office 


Soeet 12 Noyce Drivt 
Fair Oak 
EastldiEh 


City Hfltt^Mhire 


State or Country 
U.K. 


ZipCode 1 
SO50 
7LT 1 






Dated: « 




invBiiiori SigaaiUK: )(^^^^_ 




RiIINsmcof 


'Last Name 
Tolsch 


HfttNaiw 
Don 


Middle Mane 


Citisettship 


CEtyAlboqacrqw 


Slas or Rofeign Couotry 

NM 


Cowtiy of Cilizemihip 




Pbst Office 
Addnsss 


Street 5836 Lost Dutdunan NE 


City AlbiU|U«r<|i]e 


Slate urCmuitfy 

U.S.A. 


Zip Code 
87111 



■ 

Dated: 


Invetttcr^ Signatuie: 




FuHNameof 
laveolor 


Last Name 




MtddteName 




Otizensfnp 


City 


State or Hnciga Country 


Coufitiy of Citizciubip 




Post Office 
Address 


Stz«t 


City 


State Of Country 


Zip Code 
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TOTAL P,03 



